OTL logfile created on: 2012-08-24 00:29:44 - Run 2
OTL by OldTimer - Version 3.2.58.1     Folder = C:\Users\marcin\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
6,00 Gb Total Physical Memory | 4,51 Gb Available Physical Memory | 75,14% Memory free
12,00 Gb Paging File | 10,25 Gb Available in Paging File | 85,42% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97,66 Gb Total Space | 55,42 Gb Free Space | 56,75% Space Free | Partition Type: NTFS
Drive D: | 578,42 Gb Total Space | 257,41 Gb Free Space | 44,50% Space Free | Partition Type: NTFS
Drive E: | 255,43 Gb Total Space | 96,64 Gb Free Space | 37,84% Space Free | Partition Type: NTFS
 
Computer Name: DHD | User Name: marcin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-08-24 00:05:37 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\marcin\Desktop\OTL.exe
PRC - [2012-08-22 19:25:03 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2012-08-22 19:25:02 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012-08-22 19:25:02 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2012-08-17 15:02:30 | 000,301,688 | ---- | M] (Thesycon GmbH) -- C:\Users\marcin\Desktop\dpclat.exe
PRC - [2009-07-20 04:00:00 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2009-07-20 04:00:00 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2012-04-06 04:16:02 | 000,236,544 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2011-08-05 12:53:12 | 000,467,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc)
SRV:[b]64bit:[/b] - [2011-08-05 12:53:12 | 000,306,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\WMZuneComm.exe -- (WMZuneComm)
SRV:[b]64bit:[/b] - [2011-08-05 12:53:06 | 008,277,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc)
SRV:[b]64bit:[/b] - [2009-07-20 12:36:14 | 000,160,784 | ---- | M] (Logitech, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012-08-22 19:25:03 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012-08-22 19:25:02 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009-07-14 03:15:31 | 000,396,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2009-07-14 03:15:31 | 000,396,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2009-07-14 03:14:53 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2012-08-22 19:25:03 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:[b]64bit:[/b] - [2012-08-22 19:25:03 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2012-07-22 19:41:38 | 000,024,672 | ---- | M] (Resplendence Software Projects Sp.) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rspLLL64.sys -- (rspLLL)
DRV:[b]64bit:[/b] - [2012-04-06 07:22:40 | 011,174,400 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2012-04-06 07:22:40 | 011,174,400 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2012-04-06 03:10:44 | 000,343,040 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2012-03-05 16:04:30 | 000,053,888 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.1)
DRV:[b]64bit:[/b] - [2012-02-23 14:32:04 | 000,095,760 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:[b]64bit:[/b] - [2011-09-16 16:09:16 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:[b]64bit:[/b] - [2011-06-13 15:59:31 | 000,503,352 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2011-01-20 02:47:18 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)
DRV:[b]64bit:[/b] - [2010-07-06 11:13:12 | 000,280,344 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rtenic64.sys -- (RTLE8023x64)
DRV:[b]64bit:[/b] - [2010-06-23 11:10:56 | 000,344,680 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2010-03-09 12:21:42 | 000,123,408 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:[b]64bit:[/b] - [2010-02-18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:[b]64bit:[/b] - [2009-08-24 00:55:32 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
DRV:[b]64bit:[/b] - [2009-07-16 05:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-17 18:54:30 | 000,057,872 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:[b]64bit:[/b] - [2009-06-17 18:54:22 | 000,055,312 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:[b]64bit:[/b] - [2009-06-17 18:54:14 | 000,013,328 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidEqd.sys -- (LHidEqd)
DRV:[b]64bit:[/b] - [2009-06-17 18:54:06 | 000,074,256 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LEqdUsb.sys -- (LEqdUsb)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2008-09-17 14:14:00 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Entech64.sys -- (ENTECH64)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2004-06-22 15:44:50 | 000,005,632 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Entech64.sys -- (ENTECH64)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3004105756-218876714-1717833884-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-3004105756-218876714-1717833884-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3004105756-218876714-1717833884-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3004105756-218876714-1717833884-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - user.js - File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-04-06 12:24:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-08-17 15:06:07 | 000,000,000 | ---D | M]
 
[2011-06-16 23:36:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\marcin\AppData\Roaming\mozilla\Extensions
[2012-08-21 12:13:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\marcin\AppData\Roaming\mozilla\Firefox\Profiles\sak3m74d.default\extensions
[2011-06-05 03:31:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012-08-09 22:26:58 | 000,276,167 | ---- | M] () (No name found) -- C:\USERS\MARCIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SAK3M74D.DEFAULT\EXTENSIONS\{64161300-E22B-11DB-8314-0800200C9A66}.XPI
[2012-08-21 12:13:19 | 000,375,811 | ---- | M] () (No name found) -- C:\USERS\MARCIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SAK3M74D.DEFAULT\EXTENSIONS\{AE93811A-5C9A-4D34-8462-F7B864FC4696}.XPI
[2011-08-26 11:47:03 | 000,034,313 | ---- | M] () (No name found) -- C:\USERS\MARCIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SAK3M74D.DEFAULT\EXTENSIONS\{DB9127A2-3381-41EC-82B3-1B6ED4C6F29A}.XPI
[2012-02-29 17:02:23 | 000,709,293 | ---- | M] () (No name found) -- C:\USERS\MARCIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SAK3M74D.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}.XPI
[2012-04-06 12:24:17 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012-04-06 12:24:15 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2012-04-06 12:24:15 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2012-04-06 12:24:15 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2012-04-06 12:24:15 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2012-04-06 12:24:15 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-04-06 12:24:15 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2011-06-04 23:01:51 | 000,000,864 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 validation.sls.microsoft.com
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
O4 - HKU\S-1-5-20..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载 - C:\Users\marcin\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载全部链接 - C:\Users\marcin\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: 使用快车3下载 - C:\Users\marcin\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\marcin\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 188.121.31.200 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{13F0738B-B13E-41C5-8753-B2C4B25D8B28}: DhcpNameServer = 188.121.31.200 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:[b]64bit:[/b] - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{8d6ee478-95c7-11e0-9115-bcaec5cdf0a1}\Shell - "" = AutoRun
O33 - MountPoints2\{8d6ee478-95c7-11e0-9115-bcaec5cdf0a1}\Shell\AutoRun\command - "" = I:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-08-24 00:05:36 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\marcin\Desktop\OTL.exe
[2012-08-23 23:19:59 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{6C277543-A5EA-4939-9FC7-793778368545}
[2012-08-23 20:01:04 | 013,619,104 | ---- | C] (Opera Software ASA) -- C:\Users\marcin\Desktop\Opera-12.02-1565.x64.exe
[2012-08-23 11:36:56 | 010,620,880 | ---- | C] (Opera Software ASA) -- C:\Users\marcin\Desktop\Opera_1164_int_Setup.exe
[2012-08-23 11:19:23 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{C3870516-7FD5-4F97-998C-ED8225F07CDD}
[2012-08-23 00:45:27 | 000,696,520 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-08-23 00:45:27 | 000,073,416 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-08-22 23:18:47 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{AAB312FF-FC59-4BA5-A16E-DEA49437D9A1}
[2012-08-22 17:36:10 | 000,000,000 | ---D | C] -- C:\Games
[2012-08-22 12:27:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
[2012-08-22 12:27:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack
[2012-08-22 11:36:07 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uberOptions
[2012-08-22 11:36:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uberOptions
[2012-08-22 11:31:27 | 000,190,992 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\BtCoreIf.dll
[2012-08-22 11:31:25 | 000,235,536 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\KemUtil.dll
[2012-08-22 11:31:25 | 000,235,536 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\kemutb.dll
[2012-08-22 11:31:25 | 000,159,248 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\KemWnd.dll
[2012-08-22 11:31:25 | 000,096,272 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\KemXML.dll
[2012-08-22 11:31:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech
[2012-08-22 11:31:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Logishrd
[2012-08-22 11:18:11 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{47CAC213-5FC2-4D53-BBCA-BCBEB540EF44}
[2012-08-21 22:57:24 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\Google
[2012-08-21 22:57:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2012-08-21 20:37:21 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{17421D31-B365-4F50-ACF9-875466A006FC}
[2012-08-21 20:30:45 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2012-08-21 20:30:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2012-08-21 20:30:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2012-08-21 20:29:18 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2012-08-21 20:19:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2012-08-21 19:53:31 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2012-08-21 19:44:00 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2012-08-21 19:33:38 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Roaming\Avira
[2012-08-21 19:23:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2012-08-21 19:23:02 | 000,132,832 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2012-08-21 19:23:02 | 000,098,848 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2012-08-21 19:23:02 | 000,027,760 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2012-08-21 19:23:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2012-08-21 19:23:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2012-08-21 19:15:27 | 000,000,000 | ---D | C] -- C:\AMD
[2012-08-21 15:22:34 | 000,018,960 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\drivers\LNonPnP.sys
[2012-08-21 15:22:13 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\LogiShrd
[2012-08-21 15:18:42 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Roaming\Logitech
[2012-08-21 15:18:42 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Roaming\Logishrd
[2012-08-21 14:19:00 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\BestPractices
[2012-08-21 14:18:58 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\BestPractices
[2012-08-21 14:18:56 | 000,000,000 | ---D | C] -- C:\inetpub
[2012-08-21 14:05:35 | 000,268,784 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
[2012-08-21 14:05:29 | 000,189,424 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
[2012-08-21 14:05:29 | 000,188,912 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
[2012-08-21 14:05:24 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012-08-21 13:39:43 | 000,000,000 | ---D | C] -- C:\ATI
[2012-08-21 13:03:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Phyxion.net
[2012-08-21 12:35:49 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll
[2012-08-21 08:08:11 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{3FBD401C-EDDE-483D-BA2E-E2FEA1C9BD38}
[2012-08-20 18:04:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2012-08-20 17:10:28 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{7EB82FBA-9906-49EC-9165-1969877431AA}
[2012-08-19 23:15:38 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{F46779EB-3E3D-46A0-88E7-88F11F1DD752}
[2012-08-19 11:56:15 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2012-08-19 11:56:15 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2012-08-19 11:56:03 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2012-08-19 11:56:02 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2012-08-19 11:56:02 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll
[2012-08-19 11:56:02 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2012-08-19 11:56:02 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2012-08-19 11:56:02 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2012-08-19 11:56:01 | 002,624,616 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2012-08-19 11:56:01 | 002,018,920 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2012-08-19 11:56:01 | 001,210,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2012-08-19 11:56:01 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2012-08-19 11:56:01 | 000,476,264 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2012-08-19 11:56:01 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2012-08-19 11:56:01 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2012-08-19 11:56:01 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2012-08-19 11:56:01 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2012-08-19 11:56:01 | 000,233,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2012-08-19 11:56:01 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2012-08-19 11:56:01 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2012-08-19 11:56:01 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2012-08-19 11:56:01 | 000,080,720 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll
[2012-08-19 11:56:01 | 000,078,672 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll
[2012-08-19 11:56:01 | 000,076,904 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll
[2012-08-19 11:56:01 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2012-08-19 11:56:01 | 000,073,552 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2012-08-19 11:56:00 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2012-08-19 11:56:00 | 001,736,536 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll
[2012-08-19 11:56:00 | 000,335,192 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2012-08-19 11:56:00 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2012-08-19 11:56:00 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2012-08-19 11:55:59 | 001,325,328 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2012-08-19 11:55:59 | 001,178,384 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2012-08-19 11:55:59 | 001,110,800 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2012-08-19 11:55:59 | 000,504,592 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2012-08-19 11:55:59 | 000,489,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2012-08-19 11:55:59 | 000,474,896 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2012-08-19 11:55:59 | 000,330,656 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2012-08-19 11:55:59 | 000,315,152 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2012-08-19 11:55:59 | 000,268,560 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2012-08-19 11:55:59 | 000,265,488 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2012-08-19 11:55:59 | 000,168,288 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2012-08-19 11:55:59 | 000,124,128 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2012-08-19 11:55:59 | 000,124,128 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2012-08-19 11:55:59 | 000,123,104 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2012-08-19 11:55:59 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2012-08-19 11:55:56 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2012-08-19 11:51:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2012-08-19 11:15:02 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{AD2A9864-934C-4FA2-AA1E-CCC996526C45}
[2012-08-18 23:14:24 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{5F8BE47F-40D2-4888-98C4-F9E5EA5D905D}
[2012-08-18 21:55:17 | 000,000,000 | ---D | C] -- C:\Users\marcin\Desktop\stick
[2012-08-18 10:50:20 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{91C36810-A857-4D82-87BA-8C767596B6DC}
[2012-08-18 01:17:10 | 000,024,672 | ---- | C] (Resplendence Software Projects Sp.) -- C:\Windows\SysNative\drivers\rspLLL64.sys
[2012-08-18 01:17:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LatencyMon
[2012-08-18 01:17:10 | 000,000,000 | ---D | C] -- C:\Program Files\LatencyMon
[2012-08-17 22:59:04 | 000,280,344 | ---- | C] (Realtek Semiconductor Corporation                           ) -- C:\Windows\SysNative\drivers\Rtenic64.sys
[2012-08-17 22:59:04 | 000,107,552 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll
[2012-08-17 22:49:54 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{11CA5EB5-F17C-4220-9E42-B38AB61D8E97}
[2012-08-17 22:49:31 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{E2749394-AC08-4688-91F4-D31FA12A2EC4}
[2012-08-17 15:59:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Win7codecs
[2012-08-17 15:02:30 | 000,301,688 | ---- | C] (Thesycon GmbH) -- C:\Users\marcin\Desktop\dpclat.exe
[2012-08-17 10:49:05 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{8F6649EA-F44B-4C97-8FA1-C3ED5479DA40}
[2012-08-17 10:48:43 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{281B0268-A8AD-42C9-BC92-46DB737ACB77}
[2012-08-16 22:48:17 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{290A345D-2403-4216-BB9E-1685827D9863}
[2012-08-16 22:47:55 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{606573B8-BBF7-47F0-8D77-D3F6A24BC492}
[2012-08-16 10:47:29 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{E0ACF61A-16A6-4972-ACCB-1892DC735649}
[2012-08-16 10:47:07 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{A8F6A1FA-81A3-4179-832E-6717C0E15EE4}
[2012-08-15 22:46:41 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{130E3255-799F-449E-98EC-A073FEDD75E6}
[2012-08-15 22:46:18 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{73746B6F-6D0A-4776-926C-9EE2F5F3065A}
[2012-08-15 15:19:42 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Roaming\foobar2000
[2012-08-15 15:19:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\foobar2000
[2012-08-15 10:45:52 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{DC11C568-E473-41C6-B0A2-367F69F468B0}
[2012-08-15 10:45:30 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{6297DA24-1C7F-4452-ADF6-7EB83A57D3AC}
[2012-08-14 22:45:04 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{A7A66516-B697-44C8-AD3E-DF03CEC7ADA4}
[2012-08-14 22:44:41 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{BF7609C0-3C00-406F-BA4F-B4AC88314AA4}
[2012-08-14 14:32:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Winamp
[2012-08-14 14:14:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine
[2012-08-14 10:44:15 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{4F2E3E03-1ABD-4CE7-A7A5-40DBA2519F8F}
[2012-08-14 10:43:52 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{6D0131E4-3D9F-40E2-9D3E-31205696FE24}
[2012-08-13 22:25:43 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{B8BA17BD-AD14-4C58-92C2-45FDD879CF8D}
[2012-08-13 22:25:21 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{CF5BA6AF-87F9-44DB-9C19-C663E08FA987}
[2012-08-13 16:58:00 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2012-08-13 16:57:59 | 000,000,000 | R--D | C] -- C:\Users\marcin\Podcasts
[2012-08-13 16:57:49 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ms-MY
[2012-08-13 16:51:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zune
[2012-08-13 16:51:50 | 000,000,000 | ---D | C] -- C:\Program Files\Zune
[2012-08-13 16:51:26 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll
[2012-08-13 10:24:54 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{7186BDBE-2360-4257-B2AD-41F1D0766B3D}
[2012-08-13 10:24:32 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{A073D60E-E100-4A3A-B789-6EF4CF95F04E}
[2012-08-12 22:24:06 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{F6E19C86-B79C-4221-BAAD-59BDF855A75F}
[2012-08-12 22:23:43 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{5BA0DE0F-EE34-4C21-828E-649A2B429646}
[2012-08-12 10:23:30 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{3319B193-425A-4B0A-B660-69528FCEBE3F}
[2012-08-12 10:23:07 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{F7F0E228-66DA-4DF5-A811-CCC5F0E61AF9}
[2012-08-11 22:17:29 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{0D71D341-6C9D-4126-AB78-1CEFA0A11096}
[2012-08-11 22:17:07 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{58D19202-B5F2-4F5B-9490-9AB3B167624C}
[2012-08-11 10:16:53 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{B8F5FE7D-A2AB-41F7-9E99-B05F6D510F2E}
[2012-08-11 10:16:31 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{FB0BBE51-14AB-4ECA-8503-DDDEF9BCC49A}
[2012-08-10 21:50:44 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{DB7E7E6C-E4CF-4026-A491-AE367236CA12}
[2012-08-10 21:50:21 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{98C6935A-3D76-41B6-B7F2-628375220528}
[2012-08-10 09:50:08 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{FDECC37F-93E0-46D3-8150-8F107DC1D88C}
[2012-08-10 09:49:45 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{5896ECD6-0F28-4C98-BDF7-20BD6B013B13}
[2012-08-09 22:11:47 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2012-08-09 21:59:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2012-08-09 17:53:34 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{B5D71808-31B7-4E62-9CC1-874453A0090A}
[2012-08-09 17:53:10 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{65EA9FC9-E065-4D58-94B0-22B47922FE89}
[2012-08-09 11:24:34 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{005B09BD-F183-4703-B398-0E9BADEB2AEA}
[2012-08-09 11:13:59 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{92F2F1C5-F69F-4E92-909B-E8C26EE0B3EB}
[2012-08-09 11:13:47 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{BD163F28-57B3-442E-9A2E-7B25BA578EAD}
[2012-08-08 22:03:54 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{13D4E719-78D3-48B4-A3B5-A5706A15794B}
[2012-08-08 22:03:32 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{90280F21-62E5-413B-9E9A-CE6C0541A39D}
[2012-08-08 10:03:05 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{F17617AB-83F7-4BEE-B72D-EB39160D81A7}
[2012-08-08 10:02:43 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{75B5F424-9404-4625-96E0-8B8B3E2FFA3C}
[2012-08-07 13:54:01 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{7D70420C-DD2B-4366-A623-48A80BE83CD3}
[2012-08-07 13:53:38 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{1B2788C2-9116-4BDC-AEFE-CC9AEAC4AC3A}
[2012-08-06 23:02:20 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{12339474-F2B3-487C-9E27-1D7AB8BA6ADA}
[2012-08-06 23:01:58 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{613EF68E-2AA3-4AC0-9CFA-0F008439D72E}
[2012-08-06 11:01:44 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{F21FDFC5-A36D-4346-A21D-95BAE4CAAC77}
[2012-08-06 11:01:22 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{9E650EBF-6554-4AFE-91DD-E21A9A41EB92}
[2012-08-05 23:00:56 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{BA1ECC80-D371-491D-918B-4FFA153D66AB}
[2012-08-05 23:00:33 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{29AE60B7-9F9E-4041-9798-1D224A199CCB}
[2012-08-05 11:00:20 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{6E9E15D5-282D-4D71-9DBB-2A262077461C}
[2012-08-05 10:59:58 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{3CD41006-A27F-4FD0-A1D6-C394CB7C59A4}
[2012-08-04 22:57:57 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{5B273924-F9C3-44D6-B851-381DE5DA8227}
[2012-08-04 22:57:34 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{D95D35DF-2B5A-4F56-B0FC-E474ACA4AED9}
[2012-08-04 10:57:21 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{E58C508C-3FB4-4D55-B2C0-DDE691BA8B9E}
[2012-08-04 10:56:59 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{769DF04B-01F3-4E23-B96B-B387506D7553}
[2012-08-03 22:56:33 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{5A038607-847C-48CE-9E9E-D44B2F65C8AA}
[2012-08-03 22:56:10 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{655A3E04-F727-4098-8835-7FB47C5C78D6}
[2012-08-03 18:51:53 | 000,000,000 | ---D | C] -- C:\Users\marcin\Desktop\sierpień 2012
[2012-08-03 10:55:45 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{9ACBCD3B-82A1-4178-8EAF-066C82711BC6}
[2012-08-03 10:55:22 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{F8762EB2-75A7-4C64-A54C-E0918541D33F}
[2012-08-02 22:54:56 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{5AE18D28-D336-4954-8E24-9E7ACAF25DF0}
[2012-08-02 22:54:34 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{D1B902C9-99E2-410C-8D1E-82400736C55F}
[2012-08-02 10:54:08 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{5B7F6E0D-896E-49BA-8703-F5DFA543591A}
[2012-08-02 10:53:44 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{E58A8FD3-9866-496B-89D2-EAE5869FCC76}
[2012-08-01 21:16:31 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{98491AF5-4CAA-4DC3-91EE-F8FCAFCDA9E5}
[2012-08-01 21:16:08 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{AA541315-1E7D-4EB4-B1A8-F3148D3E1496}
[2012-08-01 09:15:54 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{CF604165-5564-4D19-B4F7-8A3507D33810}
[2012-08-01 09:15:31 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{C90C56C6-D842-497C-B4BF-7235DA07CF69}
[2012-07-31 18:03:35 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{D1679422-2F7A-48B0-854E-821BAD727A1F}
[2012-07-31 18:03:24 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{9531E845-AE2C-4B2B-B529-AC0EC60916A2}
[2012-07-30 23:16:43 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{BEE7B453-2669-4171-876A-451F1DEB8567}
[2012-07-30 23:16:21 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{E5953DAD-A9F3-4C7F-A227-5A2977B5B3CA}
[2012-07-30 11:15:55 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{BD5CD9D1-B0F8-42C1-905C-6A46D1FB99E5}
[2012-07-30 11:15:32 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{F86A69EE-1DE2-41A9-A268-05679E04FB0B}
[2012-07-29 23:15:06 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{4EC2102F-682D-4484-AA1F-0FEFE2F55F58}
[2012-07-29 23:14:44 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{DA6F017E-717A-4AB8-B66B-DCC39BAAC81F}
[2012-07-29 11:14:30 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{C2626AA1-8F4B-4392-8AB9-758DC19054B6}
[2012-07-29 11:14:06 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{E3CB314E-464B-470A-8CAD-4DBA5A072196}
[2012-07-28 23:13:37 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{BC8A7E6E-ECBF-4925-9DC0-008588428144}
[2012-07-28 23:13:15 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{6A812136-6770-4B53-916E-B569E66D00C5}
[2012-07-28 11:12:49 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{594E4931-BE62-4365-934D-25F5DE49F7BE}
[2012-07-28 11:12:26 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{AAD12714-4C7B-4D21-AFE5-6C75E101C1CB}
[2012-07-27 23:10:15 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{B3C9C47D-A874-479E-BAF7-BEE177948FCD}
[2012-07-27 23:09:52 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{EC0E7FB1-B9A0-4AB9-9468-06B8E568F122}
[2012-07-27 11:09:39 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{BDEE490E-126F-43F1-9EC8-F0EB6F6B3CF2}
[2012-07-27 11:09:16 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{D419BA0D-548F-4249-9AD9-BED1069F6B89}
[2012-07-26 23:29:02 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{3C4FB536-92B2-419C-AA20-345B8E706E78}
[2012-07-26 10:44:52 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{9EE69C8E-B6E6-4E02-9A0C-5C80D606B1C3}
[2012-07-26 10:44:30 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{869C2F8A-5601-45F4-9C93-0FDA848D84DB}
[2012-07-25 22:40:23 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{9C5FEEB1-9878-4E37-A030-0DFBB020C22C}
[2012-07-25 22:40:01 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{54CE68DC-A180-4D58-81FD-786AFCC218FD}
[2012-07-25 10:39:34 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{10E47DBC-6819-4326-A2BE-E79C68B2EC3C}
[2012-07-25 10:39:12 | 000,000,000 | ---D | C] -- C:\Users\marcin\AppData\Local\{D910A776-597A-4809-801B-911409C24E2E}
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-08-24 00:27:59 | 000,016,624 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-08-24 00:27:59 | 000,016,624 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-08-24 00:20:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-08-24 00:18:23 | 000,000,478 | ---- | M] () -- C:\Users\marcin\Documents\ax_files.xml
[2012-08-24 00:05:37 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\marcin\Desktop\OTL.exe
[2012-08-24 00:03:30 | 000,007,626 | ---- | M] () -- C:\Users\marcin\AppData\Local\Resmon.ResmonCfg
[2012-08-23 20:01:19 | 013,619,104 | ---- | M] (Opera Software ASA) -- C:\Users\marcin\Desktop\Opera-12.02-1565.x64.exe
[2012-08-23 19:56:53 | 028,177,549 | ---- | M] () -- C:\Users\marcin\Desktop\Opera-12.02-1565.dmg
[2012-08-23 11:36:56 | 010,620,880 | ---- | M] (Opera Software ASA) -- C:\Users\marcin\Desktop\Opera_1164_int_Setup.exe
[2012-08-23 00:45:27 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-08-23 00:45:27 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-08-22 19:25:03 | 000,132,832 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2012-08-22 19:25:03 | 000,098,848 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2012-08-22 17:36:12 | 000,000,881 | ---- | M] () -- C:\Users\Public\Desktop\World of Tanks - Physics Preview.lnk
[2012-08-22 15:48:37 | 083,167,164 | ---- | M] () -- C:\Users\marcin\Desktop\Big Buck Bunny 1080p FULL HD Trickfilm animation (1080p HD).flv
[2012-08-22 15:40:02 | 270,365,072 | ---- | M] () -- C:\Users\marcin\Desktop\Big Buck Bunny 1080p FULL HD Trickfilm animation (1080p HD).mp4
[2012-08-22 11:31:27 | 000,001,751 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
[2012-08-21 15:43:43 | 000,772,592 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll
[2012-08-21 15:43:43 | 000,687,600 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll
[2012-08-21 15:22:34 | 000,018,960 | ---- | M] (Logitech, Inc.) -- C:\Windows\SysNative\drivers\LNonPnP.sys
[2012-08-21 14:20:05 | 001,766,772 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-08-21 14:20:05 | 000,785,222 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2012-08-21 14:20:05 | 000,694,324 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-08-21 14:20:05 | 000,174,378 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2012-08-21 14:20:05 | 000,134,470 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-08-21 14:19:55 | 001,674,122 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012-08-21 14:05:25 | 000,955,888 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll
[2012-08-21 14:05:25 | 000,839,152 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll
[2012-08-21 14:05:25 | 000,268,784 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
[2012-08-21 14:05:25 | 000,189,424 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
[2012-08-21 14:05:25 | 000,188,912 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
[2012-08-21 13:43:59 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2012-08-19 16:38:33 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat
[2012-08-19 14:20:54 | 000,137,489 | ---- | M] () -- C:\Users\marcin\Desktop\7814486198_97a9632d4a_b.jpg
[2012-08-19 12:52:04 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini
[2012-08-18 01:17:10 | 000,000,814 | ---- | M] () -- C:\Users\marcin\Desktop\LatencyMon.lnk
[2012-08-17 15:02:30 | 000,301,688 | ---- | M] (Thesycon GmbH) -- C:\Users\marcin\Desktop\dpclat.exe
[2012-08-16 19:12:11 | 000,259,665 | ---- | M] () -- C:\Users\marcin\Desktop\DSCF6916.jpg
[2012-08-16 19:11:11 | 000,257,511 | ---- | M] () -- C:\Users\marcin\Desktop\DSCF6918.jpg
[2012-08-15 15:19:35 | 000,001,113 | ---- | M] () -- C:\Users\marcin\Application Data\Microsoft\Internet Explorer\Quick Launch\foobar2000 — skrót.lnk
[2012-08-15 15:15:58 | 000,275,536 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-08-13 16:57:52 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_ZuneDriver_01_09_00.Wdf
[2012-08-13 16:57:47 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf
[2012-08-13 15:34:38 | 000,173,310 | ---- | M] () -- C:\Users\marcin\Desktop\586577455_o.jpg
[2012-08-12 17:40:41 | 000,002,899 | ---- | M] () -- C:\Users\marcin\Desktop\htc.html
[2012-08-09 21:45:43 | 000,001,583 | ---- | M] () -- C:\Users\marcin\Desktop\filmy rodzinne.lnk
[2012-07-28 15:28:57 | 000,008,192 | ---- | M] () -- C:\Users\marcin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-08-23 19:56:28 | 028,177,549 | ---- | C] () -- C:\Users\marcin\Desktop\Opera-12.02-1565.dmg
[2012-08-22 17:36:12 | 000,000,881 | ---- | C] () -- C:\Users\Public\Desktop\World of Tanks - Physics Preview.lnk
[2012-08-22 15:41:17 | 083,167,164 | ---- | C] () -- C:\Users\marcin\Desktop\Big Buck Bunny 1080p FULL HD Trickfilm animation (1080p HD).flv
[2012-08-22 15:39:08 | 270,365,072 | ---- | C] () -- C:\Users\marcin\Desktop\Big Buck Bunny 1080p FULL HD Trickfilm animation (1080p HD).mp4
[2012-08-22 12:27:22 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2012-08-22 11:31:27 | 000,001,751 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
[2012-08-21 22:55:51 | 000,001,417 | ---- | C] () -- C:\Users\marcin\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Explorer (64-bitowy) — skrót.lnk
[2012-08-21 14:19:49 | 001,674,122 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012-08-21 13:43:59 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012-08-19 16:38:33 | 000,003,288 | ---- | C] () -- C:\bootsqm.dat
[2012-08-19 14:20:54 | 000,137,489 | ---- | C] () -- C:\Users\marcin\Desktop\7814486198_97a9632d4a_b.jpg
[2012-08-19 11:51:34 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2012-08-18 01:17:10 | 000,000,814 | ---- | C] () -- C:\Users\marcin\Desktop\LatencyMon.lnk
[2012-08-15 18:35:07 | 000,001,113 | ---- | C] () -- C:\Users\marcin\Application Data\Microsoft\Internet Explorer\Quick Launch\foobar2000 — skrót.lnk
[2012-08-15 15:19:35 | 000,001,113 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
[2012-08-13 16:57:52 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_ZuneDriver_01_09_00.Wdf
[2012-08-13 16:57:47 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf
[2012-08-13 15:34:38 | 000,173,310 | ---- | C] () -- C:\Users\marcin\Desktop\586577455_o.jpg
[2012-08-09 21:45:01 | 000,001,583 | ---- | C] () -- C:\Users\marcin\Desktop\filmy rodzinne.lnk
[2012-07-04 07:34:16 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012-07-04 07:34:16 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012-05-15 14:51:44 | 000,003,869 | ---- | C] () -- C:\Users\marcin\iphone.html
[2012-05-15 14:51:44 | 000,003,464 | ---- | C] () -- C:\Users\marcin\htc.html
[2012-01-10 12:52:27 | 000,000,530 | ---- | C] () -- C:\Windows\SysWow64\tx14_ic.ini
[2011-10-10 16:20:13 | 000,008,192 | ---- | C] () -- C:\Users\marcin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011-08-26 12:09:09 | 000,000,103 | ---- | C] () -- C:\Windows\pro.INI
[2011-08-26 11:42:32 | 000,000,204 | ---- | C] () -- C:\Windows\SysWow64\secustat.dat
[2011-08-26 11:39:23 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI
[2011-06-18 13:17:14 | 000,000,620 | ---- | C] () -- C:\Users\marcin\AppData\Roaming\burnaware.ini
[2011-06-11 18:39:05 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys
[2011-06-05 03:32:02 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011-06-05 02:07:44 | 000,000,031 | ---- | C] () -- C:\Users\marcin\AppData\Roaming\Days5.ini
[2011-06-04 22:31:41 | 000,000,031 | ---- | C] () -- C:\Windows\Days5.ini
[2011-06-04 22:02:37 | 000,000,031 | ---- | C] () -- C:\Windows\SysWow64\Days5.ini
[2011-06-04 21:24:20 | 000,007,626 | ---- | C] () -- C:\Users\marcin\AppData\Local\Resmon.ResmonCfg
[2011-06-04 02:01:52 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2011-06-04 02:01:46 | 000,022,282 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2011-06-02 16:00:56 | 002,958,492 | ---- | C] () -- C:\Users\marcin\Bez tytułu.png
[2011-06-02 16:00:56 | 001,979,113 | ---- | C] () -- C:\Users\marcin\ez tytułu.png
[2011-06-02 16:00:56 | 000,434,614 | ---- | C] () -- C:\Users\marcin\SZPITS~1.ZIP
[2011-06-02 16:00:56 | 000,326,572 | ---- | C] () -- C:\Users\marcin\net z routerem.jpg
[2011-06-02 16:00:56 | 000,261,120 | ---- | C] () -- C:\Users\marcin\Sprawdzacz.exe
[2011-06-02 16:00:56 | 000,176,069 | ---- | C] () -- C:\Users\marcin\tv2.jpg
[2011-06-02 16:00:56 | 000,172,839 | ---- | C] () -- C:\Users\marcin\tv1.jpg
[2011-06-02 16:00:56 | 000,157,534 | ---- | C] () -- C:\Users\marcin\tv3.jpg
[2011-06-02 16:00:56 | 000,130,678 | ---- | C] () -- C:\Users\marcin\tv4.jpg
[2011-06-02 16:00:56 | 000,113,563 | ---- | C] () -- C:\Users\marcin\tv5.jpg
[2011-06-02 16:00:56 | 000,062,015 | ---- | C] () -- C:\Users\marcin\net2008.jpg
[2011-06-02 16:00:56 | 000,044,316 | ---- | C] () -- C:\Users\marcin\harman.html
[2011-06-02 16:00:56 | 000,028,659 | ---- | C] () -- C:\Users\marcin\net.jpg
[2011-06-02 16:00:56 | 000,028,212 | ---- | C] () -- C:\Users\marcin\iu-ip.png
[2011-06-02 16:00:56 | 000,017,826 | ---- | C] () -- C:\Users\marcin\edytor.html
[2011-06-02 16:00:56 | 000,014,388 | ---- | C] () -- C:\Users\marcin\q3config.cfg
[2011-06-02 16:00:56 | 000,007,634 | ---- | C] () -- C:\Users\marcin\fajna aukcja.html
[2011-06-02 16:00:56 | 000,007,389 | ---- | C] () -- C:\Users\marcin\czarna.html
[2011-06-02 16:00:56 | 000,006,526 | ---- | C] () -- C:\Users\marcin\harman2.html
[2011-06-02 16:00:56 | 000,006,055 | ---- | C] () -- C:\Users\marcin\czarna2.html
[2011-06-02 16:00:56 | 000,004,862 | ---- | C] () -- C:\Users\marcin\hitachi_dziala_na_allegro.html
[2011-06-02 16:00:56 | 000,004,643 | ---- | C] () -- C:\Users\marcin\x2oo.html
[2011-06-02 16:00:56 | 000,004,125 | ---- | C] () -- C:\Users\marcin\e52.html
[2011-06-02 16:00:56 | 000,003,526 | ---- | C] () -- C:\Users\marcin\panel modelek.html
[2011-06-02 16:00:56 | 000,003,303 | ---- | C] () -- C:\Users\marcin\nokia music.html
[2011-06-02 16:00:56 | 000,002,711 | ---- | C] () -- C:\Users\marcin\lenco.html
[2011-06-02 16:00:56 | 000,001,795 | ---- | C] () -- C:\Users\marcin\Wrocław-tłumacze.nws
[2011-06-02 16:00:55 | 006,786,640 | ---- | C] () -- C:\Users\marcin\6380Ev1.0.pdf
[2011-06-02 16:00:55 | 000,201,659 | ---- | C] () -- C:\Users\marcin\20080604(005)parrk.jpg
[2011-06-02 16:00:55 | 000,041,484 | ---- | C] () -- C:\Users\marcin\2.jpg
[2011-06-02 16:00:55 | 000,004,786 | ---- | C] () -- C:\Users\marcin\belinea.html
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-06-05 03:50:07 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\ACD Systems
[2011-08-26 11:42:32 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\BITS
[2011-06-05 13:57:22 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\BWMeterPro
[2011-08-26 11:39:14 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\FlashGet
[2011-08-26 11:39:12 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\FlashGetBHO
[2012-08-22 15:03:13 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\foobar2000
[2012-06-13 21:18:44 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\Foxit Software
[2011-06-13 12:28:59 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\FreeStone Group
[2011-06-04 06:25:39 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\Gadu-Gadu
[2011-06-06 10:27:28 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\GHISLER
[2011-06-04 22:48:49 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\HD Tune Pro
[2011-06-04 02:43:18 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\Leadertech
[2011-06-05 02:16:12 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\ObviousIdea
[2012-06-18 23:40:04 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\Opera
[2012-08-23 11:33:23 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\uTorrent
[2012-08-22 18:05:08 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\wargaming.net
[2011-06-04 08:42:35 | 000,000,000 | ---D | M] -- C:\Users\marcin\AppData\Roaming\Windows Live Writer
[2012-08-16 09:02:37 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 615 bytes -> C:\Users\marcin\Wrocław-tłumacze.nws:OECustomProperty

< End of report >